Medium
CVE-2019-5480
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
9bc832fa-9845-4157-b7a6-54d8c3794085
Spryng Payments for WooCommerce <= 1.6.7 - Cross-Site Scripting
Medium
15d66474-e215-4d28-b6fb-259c90053212
Portrait-Archiv.com Photostore < 3.2 - Reflected Cross-Site Scripting
High
CVE-2019-16120
Event Tickets <= 4.10.7.1 - CSV Injection
Medium
CVE-2019-1010124
WooCommerce Product Feed for Google, Facebook, eBay and Many More <= 3.1.14 - Reflected Cross-Site Scripting
Critical
CVE-2019-10750
Prototype Pollution in deeply
Critical
CVE-2019-10747
Prototype Pollution in set-value
Critical
CVE-2019-10746
Prototype Pollution in mixin-deep
Medium
CVE-2019-12400
Improper input validation in Apache Santuario XML Security for Java
Medium
CVE-2019-15477
Cross-site Scripting in Jooby
Medium
CVE-2019-15482
Cross-Site Scripting in selectize-plugin-a11y
Medium
CVE-2019-15488
Cross-site Scripting in Ignite Realtime Openfire
Medium
CVE-2019-15532
Cross-Site Scripting in cyberchef
High
CVE-2019-11457
Cross-Site Request Forgery in MicroPyramid Django CRM
High
CVE-2019-15816
WP Private Content Plus <= 1.31 - Unauthenticated Settings Change
Critical
CVE-2019-14314
NextGEN Gallery <= 3.2.10 - SQL Injection
Medium
CVE-2019-15777
WP DSGVO Tools (GDPR) <= 2.2.18 - Cross-Site Scripting
High
CVE-2019-15769
HandL UTM Grabber / Tracker <= 2.6.4 - Cross-Site Request Forgery
Critical
CVE-2019-15657
Arbitrary Code Execution in eslint-utils
High
CVE-2019-15658
SQL Injection in connect-pg-simple
Critical
CVE-2015-9352
WP-Polls <= 2.71 - SQL Injection
Medium
CVE-2019-14978
WooCommerce PayU India <= 2.1.1 - Improper Input Validation
Medium
CVE-2019-14470
UserPro <= 4.9.34 - Reflected Cross-Site Scripting
Medium
CVE-2019-9155
Invalid Curve Attack in openpgp
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.